certificate-status not mandatory